Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
a036c29566fb6e87d311541b8800499d0c9ef291b40c316914aa03b5d127f6b0N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a036c29566fb6e87d311541b8800499d0c9ef291b40c316914aa03b5d127f6b0N.dll
Resource
win10v2004-20240802-en
Target
a036c29566fb6e87d311541b8800499d0c9ef291b40c316914aa03b5d127f6b0N
Size
5.9MB
MD5
db34f3a8b6636cee279e153e93337890
SHA1
be11312a99f5d09ecbdd199b4c291864cdc8ec97
SHA256
a036c29566fb6e87d311541b8800499d0c9ef291b40c316914aa03b5d127f6b0
SHA512
09bd2ee986ccad07a4fb80c445052eca448fb4dd46833a19b157c34e0d862305a6f2341879d268e28ade2e440e51d68472ceac4a1b1c40f2bcc8f1ad43ad34b8
SSDEEP
98304:Orly99fkHFCuqZrTEPc1iltTYSnOuYOfyC6tjXV1gb5Of5ta4Mr/Znb66:OrIqCuqZrIPc1iUSnOuYOfyCUjw5mfMj
resource | yara_rule |
---|---|
sample | vmprotect |
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetVersion
GetVersionExW
FlsSetValue
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
OffsetRect
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
CreateMetaFileW
CryptDestroyHash
CoSetProxyBlanket
RegisterTypeLi
StrStrIW
GdipCloneImage
GetFileVersionInfoSizeW
ExpandEnvironmentStringsForUserW
CertOpenSystemStoreW
ImmAssociateContext
WSACleanup
AlphaBlend
GetAdaptersAddresses
WTSSendMessageW
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
��n�q���u�%%i��6���?jj���.1�/����)+$V]O0��y�r貚y'Ԧ�M�����Z�5�G�����6�ז���q�!~ 3vR�-����A�B�ߤκ�ԋ����N#�zI�}j�[�|�����Ð=�u�q`���Dވ �3�f�I �o��Ӑ���<&�Q�܀����V.�TV����=��O~��l)���6��bv�Eb��@r��g#�x(�!���ߺ�\/�=$žߨ�Ʃ�u!�r���d��U����v��'��T8Fwi�z�|+���f��&Mlà�1Í������3TxK�B����� H�E��X�[.6ц,��g%���_���M`���1���Y2]���5�.�*��v~q ���~��f����'�e����i�����D�0�u�b����ϥK���5>-BV��M���5�%�F�װi���>�1�����E��F�.��\r�U����Ip34��iQKu뛬c�.Ak��ƙ������ⴺd�)ol�BC��f����Ysl&�Ic-y�C�O�Q��j%�K���磰� ����s�e��egN[��-�n-V�d㶄V85lɁ`���A�bIk�%��.�[�!#�l,{���1�T��mE��� �7���#�;�wz�.f�5�8Ma6*�ar�+NJ�l%�V�`�!�M^��Y��5e��H����Ɏ��M�:��K�1<o]��Gc ߝ$�JV�:�i���4����G[u5V�e���D�/z�b��3j�͵������ѯ �{Lq��C\�>���� 6�WRAG(61��?D���N�3!^�̍_�lCױ�e���{n�6������w��0��K��A�c)��|�A`�.���0�����u�����A$���1��xa��(-9�(� �Y�ڸv��N�����:t�T�3�ؙ���'��P������-�K��m�҄E�������i-���&}�!Ӄ EE�t�������$�_������v��2��䬤�\���A��]�,�����J��?� �j�%��x������q%��7�y"3�9a �Օ��p��९��L�ΰC�ý)�(�b����< ��(���=*E�¦��>!��cě���� ~'���Qa���o�iGf]�ᒣ�v��&v;���5� �����!P��c V4�[�\7�%Pg{�E�Y��9z~9�d�n<�P�a�I;����ع[��ػ<��{(rs���y��� Z���:j��S��ǂ�h���5\O�?�����0³s���s&HG!*J��O��!.��+�&:A}�Tk�j�66|$�M��A��:��f�f�q�;H�ER�Ñ jp��9�,6�a�Xa@So7�_����٦�T�̚rf���������Z�42Ĝ@q���+��H�����%=��v1&0������N�mw�����Y��G�Aژ-n4w-���a� 4�%ޤ4~�n+�\L|5 09-<J¯� ,���_���Dc�&��&�|0�*�w�A��;�CT ��A���e�]���j�so��٢���A# ����s��M� iֱ~}��P��Ÿ���-�7��,�]My�]��� ��,�D��|=?��u�� ���;���d_V\a����F鏺�;�8�9�q�i;i��^A�~��lpt[�%v���;���=�*����EF@�>���ԩC�<#�H�����wc�{��E��p���n:�=xӤ+��TZ<�W�+/c���a69��kG����!����q�]\:+'��⊵bY�TD�D&��>�����=+��x� �A�G�������~lVK(���A�����ィƅ����L���B�x����?BH�Q>}�u�:Upd)i�,�8^���R����x��( e�_4�hsTҾ)c�@T����I�m�E�����3�)�D}�i���$�-�EA)�4QNC��:+�n�����I�2bi�����\�y`{�4�ܰ���K#7)�tVf��D�t�\*�ha��Y>���S 7��w�E�r��8t��ۤ}�YG�y�9�U|]�&��_`6$�XZx{�*e�[۬�����:����Q��ל�F,��Gg�~&�ALSd��v�h�Թ�l�GvA������K��5MO�.��3�'��4�轛���� i���F�D��i���};B&���| �^^&vڈ��n"lXH>g�ZҚ�������nemU�^���^����9���ٲ�p��["��ы�U����JW�KA-��c�����[�*�F�I��R�%y�\�m��RQ;۲Ƴb\l\!��D�Ƣ����y��n��ZѸ�d�(�|[����&��"Y��a=?]cl�0t+7h#��ޠhn�N&�I�Q��v~��wV[� ���L��39�f�`o؈�����k 3�q�#9���ð�<��h`ю�����Y�Aدx�͛wN�^OV��S`�=�R���ײ��̔�h*8X��[J��� ����'<�6���Ұe����.���*IH���V;��B�4'��ro8���i�Q����a k 9����nxz���+��K��x����3��qcN��f�9[/k����ՆK��Yc�:��O��;�&A�^�T�Se����f�8;�F�uL}��Sb�y0u�k8Ns:�:�Ah�Ĵ����� �Aj4����?�$5 �AU�V��9��ͺ�l�������� w* ��%��a��Q�06յ����w��M��t3����YG�jz��8<���_i��Ҥ���_����M�n����/�D)�%�Q�|�{���ٵ�"�<�N�h���,��IRW9y���5��D�XY����rwc�|6�$��=�% M��Ȓ#�GA��k�l\L���Z��#��:�h>҆Rԇ�GZ%)g����J��0�93��%.چ��M�ī3�;��5ch�<a������|�ʴ��Ig."T!*#��N�\����V�_�ƨ������ĉb�KF���#w6FUh�yl��J��'�{�!��#�m9u^v��<�����I�?�!|��찙�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ